ISO/IEC DTR 22216

Information security, cybersecurity and privacy protection — Technical developments in ISO/IEC 15408 (multipart) and ISO/IEC 18045

Scope

This document:
—    introduces the break down between the former ISO/IEC 15408 series (ISO/IEC 15408-1:2009, ISO/IEC 15408-2:2008) and ISO/IEC 15408-3:2008) and ISO/IEC 18045:2008 and the new parts introduced in the ISO/IEC 15408:2022 series and ISO/IEC 18045:2022;
—    presents the concepts newly introduced as well as the rationale for their inclusion;
—    proposes an evolution path and information on how to move from CC 3.1 and CEM 3.1 to the ISO/IEC 15408:2022 series and ISO/IEC 18045:2022, respectively;
—    maps the evolutions between the CC 3.1 and CEM 3.1 and the ISO/IEC 15408:2022 series and ISO/IEC 18045:2022, respectively.